Netgrimoire/Work/Nexus-upgrade.md
2026-02-19 20:37:45 +00:00

4 KiB

title description published date tags editor dateCreated
Nexus Upgrade true 2026-02-19T20:37:32.957Z markdown 2026-02-19T20:37:32.957Z

Cisco Nexus C9300GX-CD — NX-OS Upgrade Guide


1. Pre-Upgrade Checks

Verify Current Version and Switch Health

show version
show module
show environment
show logging last 100

Check Bootflash Space

Ensure at least 2GB of free space is available:

dir bootflash:

Save Your Running Configuration

copy running-config startup-config
copy running-config bootflash:backup-config.txt

Check Upgrade Compatibility

Verify your current and target NX-OS versions are a supported upgrade path using Cisco's Nexus 9000 Upgrade and ISSU Matrix. Some versions require intermediate "stepping stone" upgrades.


2. Download the NX-OS Image

  1. Go to https://software.cisco.com and log in (a valid service contract is required).
  2. Navigate to DownloadsSwitchesData Center SwitchesNexus 9000 Series.
  3. Select your target NX-OS release and download the appropriate image (e.g., nxos64-cs.10.5.4.M.bin).
  4. Note the MD5 checksum listed on the download page for later verification.

3. Transfer the Image to the Switch

Option A: Using Windows OpenSSH Server (SCP)

Verify OpenSSH Server is Running on Windows

Open PowerShell or Command Prompt and run:

net start sshd

Or in PowerShell:

Start-Service sshd

Confirm the firewall rule exists for port 22:

netsh advfirewall firewall show rule name="OpenSSH Server (sshd)"

Find your PC's IP address:

ipconfig

Enable SCP Server on the Switch

feature scp-server

Pull the File from the Switch CLI

From the switch, use the copy command to pull the file from your Windows PC:

 copy scp://Phil@192.168.0.3/C:/Users/Phil.SIL-PC49/Desktop/9300GX/nxos64-cs.10.5.4.M.bin bootflash: vrf management

Tip: If the path is long or contains spaces, move the file to a simple location like C:\nxos\ first:

copy scp://YourUsername@192.168.0.x/C:/nxos/nxos64-cs.10.5.4.M.bin bootflash: vrf management

4. Verify the Image

Confirm the file is on bootflash:

dir bootflash:

Verify the MD5 checksum matches what Cisco published:

show file bootflash:nxos64-cs.10.5.4.M.bin md5sum

5. Pre-Install Compatibility Check

Run the incompatibility check before upgrading to identify any configuration or feature conflicts:

show incompatibility-all nxos bootflash:nxos64-cs.10.5.4.M.bin

Review the output carefully and resolve any flagged issues before proceeding.


6. Perform the Upgrade

The switch will reload. This is the simplest and most reliable method:

install all nxos bootflash:nxos64-cs.10.5.4.M.bin

Non-Disruptive ISSU (In-Service Software Upgrade)

Data plane stays up; control plane resets (~120 seconds). Must confirm version compatibility first:

install all nxos bootflash:nxos64-cs.10.5.4.M.bin non-disruptive

The install all command performs a final compatibility check and prompts for confirmation before making any changes.


7. Post-Upgrade Verification

show version
show module
show environment
show interface status

Confirm the new NX-OS version is running and all modules/interfaces are healthy.


8. Clean Up Old Images (Optional)

Once you have confirmed a successful upgrade, remove the old image to free bootflash space:

delete bootflash:nxos64-cs.<old_version>.bin

Key Tips

  • Always schedule upgrades during a maintenance window, even for ISSU, as the C9300GX has a single supervisor.
  • In a vPC pair, upgrade the secondary switch first, then the primary.
  • Never interrupt power during the upgrade process.
  • Keep a backup of your configuration before starting.